CVE-2024-56464

EUVD-2024-55311
IBM QRadar SIEM 7.5 - 7.5.0 UP14 IF01 is affected by an information disclosure vulnerability involving exposure of directory information. IBM has addressed this vulnerability in the latest update.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.7 LOW
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
ibmCNA
2.7 LOW
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Affected Products (NVD)
VendorProductVersion
ibmqradar_security_information_and_event_manager
7.5.0
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_1
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_10
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_11
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_12
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_13
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_13_interim_fix_01
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_13_interim_fix_02
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_14
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_14_interim_fix_01
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_2
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_3
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_4
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_5
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_6
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_7
ibmqradar_security_information_and_event_manager
7.5.0:update_pack_8
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.ibm.com/support/pages/node/7253664